C/C++源程序缓冲区溢出漏洞的静态检测

Statically Detecting Likely Buffer Overflow Vulnerabilities in C/C++Program

讨论了C/C++源程序中缓冲区溢出的常见表现;分析了其特性以及产生机理;提出了在源代码的AST上附加安全属性进行漏洞静态检测的方法;讨论了该方法的实现过程。

The familiar representation of buffer overflow vulnerabilities is proposed.A analysis to the vulnerabilities'char-acteristics and how they work has been made.A method by adding the safe rules to sorcecode's AST is presented for statically detecting such problems.The approach's work-process is given.